CVE-2022-50889Race Condition within a Thread in Linux

Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 30

Description

In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in dm_integrity_dtr().

Affected Packages4 packages

Linuxlinux/linux_kernel4.12.05.4.229+4
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linux7eada909bfd7ac90a4522e56aa3179d1fd68cd14792e51aac376cfb5bd527c2a30826223b82dd177+6
debiandebian/linux< linux 6.1.4-1 (bookworm)

🔴Vulnerability Details

3
OSV
CVE-2022-50889: In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF pro2025-12-30
OSV
dm integrity: Fix UAF in dm_integrity_dtr()2025-12-30
GHSA
GHSA-xvv5-rwhg-mg45: In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF p2025-12-30

📋Vendor Advisories

2
Red Hat
kernel: dm integrity: Fix UAF in dm_integrity_dtr()2025-12-30
Debian
CVE-2022-50889: linux - In the Linux kernel, the following vulnerability has been resolved: dm integrit...2022

🕵️Threat Intelligence

1
Wiz
CVE-2022-50889 Impact, Exploitability, and Mitigation Steps | Wiz